Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/DmeFcCL3AdcNsrisW_ivuMaKIek.roa
File: DmeFcCL3AdcNsrisW_ivuMaKIek.roa (raw, json)
Hash identifier: VO9nyueGglfdvCte+hYC120AhIlijFNM+i+2f875hOk=
Subject key identifier: 0E:67:85:70:22:F7:01:D7:0D:B2:B8:AC:5B:F8:AF:B8:C6:8A:21:E9
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 018339A1
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/DmeFcCL3AdcNsrisW_ivuMaKIek.roa
Signing time: Sat 01 Jan 2022 16:05:49 +0000
ROA not before: Sat 01 Jan 2022 16:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47286
IP address blocks: 31.129.192.0/23 maxlen: 23
31.129.196.0/22 maxlen: 22
31.129.200.0/21 maxlen: 21
31.129.212.0/22 maxlen: 22
31.129.208.0/22 maxlen: 22
31.129.216.0/22 maxlen: 22
31.129.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25377185 (0x18339a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Jan 1 16:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e67857022f701d70db2b8ac5bf8afb8c68a21e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:6e:6d:20:81:61:69:eb:8a:f1:24:3c:80:
86:e9:ea:bc:40:24:c7:79:4b:9a:cb:ff:9a:c4:f4:
16:e1:1d:a9:6f:6e:51:f4:fa:33:25:e2:4a:a7:a6:
ff:d2:09:59:6d:0c:55:1f:e4:5b:82:f4:b7:ad:a1:
6b:63:d6:0c:f3:01:fc:fd:d1:ec:e4:74:9d:3e:c6:
27:0d:00:b3:8c:3f:b6:cd:3d:7b:02:8e:ea:a9:83:
97:a5:b5:1e:f8:17:23:53:58:11:43:bf:db:2f:e9:
02:77:04:ef:46:21:50:ae:27:c2:f2:db:ab:37:27:
a9:5a:7c:23:20:e7:64:44:b0:15:ee:58:1e:40:eb:
1e:6c:d1:fd:18:b7:bb:e7:c1:9a:6b:a1:98:b5:b4:
02:54:a1:a6:2b:79:a5:ca:7f:e5:44:1c:a6:d4:2c:
94:e4:33:c3:b4:7a:f9:64:d8:46:b6:58:ba:f7:38:
35:41:83:5f:88:27:99:59:3b:ff:6a:56:27:b9:21:
0d:ff:05:26:a4:40:2f:a3:d5:14:42:6b:4b:61:b0:
9b:9b:86:16:fc:9a:f6:19:fe:03:82:4b:1b:f4:ad:
26:bc:59:6f:2e:96:ea:d1:a3:47:4e:3e:ff:30:4a:
3d:af:82:08:ec:b2:0e:d7:ec:db:b8:e1:bd:74:5f:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:67:85:70:22:F7:01:D7:0D:B2:B8:AC:5B:F8:AF:B8:C6:8A:21:E9
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/DmeFcCL3AdcNsrisW_ivuMaKIek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.192.0/23
31.129.196.0-31.129.223.255
Signature Algorithm: sha256WithRSAEncryption
4b:fe:28:07:06:6f:93:c9:53:3f:a6:b2:15:85:ca:1d:09:33:
7e:1a:cc:12:3f:75:b8:e1:68:e9:22:00:da:3d:ec:c2:02:2b:
55:ac:87:ec:dc:80:29:ce:a4:22:ae:c5:f2:f6:99:92:a9:ee:
37:9d:69:da:0b:94:53:ba:7a:a5:ab:b0:ce:57:58:b5:c4:51:
6d:9d:12:dd:9d:1c:82:72:2c:dd:1b:6c:5b:97:a0:ad:78:82:
16:c0:0c:cc:d1:2d:83:4b:d1:b9:e2:90:3b:e3:57:37:d4:aa:
c6:0b:1c:04:43:af:ed:28:39:43:d0:ae:ff:cd:c6:d6:af:23:
84:3d:b4:cb:e5:81:81:d1:ee:ab:6f:34:ec:a2:ee:59:33:f5:
94:b0:64:90:e1:22:42:50:a7:a6:1a:19:39:cb:df:93:23:e5:
03:3b:40:b5:fd:58:06:cf:a9:f0:32:13:d8:f7:91:d5:54:f5:
ff:8c:4a:7c:66:5b:8b:91:d6:ee:ab:27:55:d1:a3:f4:93:81:
d4:fb:a0:52:f0:db:98:7d:18:e3:bf:5e:1e:68:e7:01:5c:fc:
4c:a4:f0:5f:5d:d0:68:ff:2e:b2:4a:9d:98:a4:15:63:4b:85:
86:b0:64:95:10:f8:5b:52:55:14:3d:fd:4b:b6:b0:85:55:ed:
8a:4f:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:17 2023 by rpki-client on console.sobornost.net